{"schema_version":"1.7.3","id":"OSV-2018-206","published":"2021-01-13T00:01:24.412685Z","modified":"2024-05-08T03:26:30Z","withdrawn":"2024-05-08T03:26:30Z","summary":"Heap-buffer-overflow in parse_sigalgs_list","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9808\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nparse_sigalgs_list\nSSL_CTX_set1_sigalgs_list\nstd::__1::function<void\n```\n","affected":[{"package":{"name":"boringssl","ecosystem":"OSS-Fuzz","purl":"pkg:generic/boringssl"},"ranges":[{"type":"GIT","repo":"https://boringssl.googlesource.com/boringssl","events":[{"introduced":"826ce15092f45ce0ff957b1d2849d74fc7a1cb83"},{"fixed":"ddedf6d455e33d6a0b3bc40581700f3d252029d7"}]}],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/boringssl/OSV-2018-206.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9808"}]}